Unknown File Manager vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20231
3. 20266

Newest CVEs

• CVE-2026-85081

  Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass

  Unknown · File Manager

  High7.5
• CVE-2026-19708

  File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure

  Unknown · File Manager

  Medium5.9
• CVE-2026-17542

  Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector

  Unknown · File Manager

  High7.5
• CVE-2026-17541

  Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

  Unknown · File Manager

  High7.5
• CVE-2026-17540

  Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

  Unknown · File Manager

  High8.8
• CVE-2026-6382

  Multiple elFinder Plugins - Authenticated OS Command Injection

  Unknown · FileOrganizer

  Critical9.1
• CVE-2023-5907

  File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal

  Unknown · File Manager

  Medium6.5
• CVE-2021-24177

  WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)

  Unknown · File Manager

  Medium5.4